General

  • Target

    c6d1a0284bf35d68b45a5357026ae9fcfc7ebf8a7d9597eff1c4e246989d8d12

  • Size

    320KB

  • MD5

    8b62ad43a8ce07d6aca962b7e4e603a8

  • SHA1

    c83b0099a6a7ca5f8968784d295cae6a2edabf0b

  • SHA256

    c6d1a0284bf35d68b45a5357026ae9fcfc7ebf8a7d9597eff1c4e246989d8d12

  • SHA512

    26a275568751b84907302684da736dda25d71b9265bb6dab36ec61f0f3cbbc7c270abdce26e7cff87039cdf0ec838a8043b78c1702aa35472b7a4cbd83daf281

  • SSDEEP

    3072:PhU2/WRICAcpJRuqy8/41QUUZm8/41QrAoUZ4pWLB51jozFWLBggS2LHqN:pybowZgZ0Wd/OWdPS2L8

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6d1a0284bf35d68b45a5357026ae9fcfc7ebf8a7d9597eff1c4e246989d8d12
    .exe windows:1 windows x86 arch:x86

    95e6f8741083e0c7d9a63d45e2472360


    Headers

    Imports

    Sections